GB/T 30271-2013Information security technology—Assessment criteria for information security service capability (English PDF)

3.1 Terms and Definitions

GB/T 25069-2010 define the following terms and definitions apply to this document.

3.1.1 Ability level

The degree of improvement achieved in the process flow fields.

NOTE. The ability level is defined by the inner flow field of appropriate specific and general execution method.

3.1.2 Basic Practice

Systems engineering process should exist in nature, and only when all of these properties fully implemented, this process is available to meet the said domain

Claim.

Note. a process area from the basic practice (BP) components.

3.1.3 Capability Maturity Model

Definition of the service or the development of relevant organizations during the various stages of development, implementation, control and improve the quality of modeling description.

Note. The model focused on improving organizational processes, including one or more of the essential elements of effective processes, and are described by a particular, immature processes to have group

Woven mature model proven processes to improve quality and efficiency.

3.1.4 Information Security Services

Organizations or individuals for various types of information security needs, the information service provider in accordance with a service agreement executed over security

Process or task.

Note. usually based on information security technology, products and management system, in the form of outsourcing, information provided by professional security personnel support and help.